nuclei-templates/http/osint/phishing/avast-phish.yaml

34 lines
827 B
YAML

id: avast-phish
info:
name: avast phishing Detection
author: rxerium
severity: info
description: |
An avast phishing website was detected
reference:
- https://avast.com
tags: phishing,avast,osint
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
words:
- 'Avast | Download Free Antivirus & VPN | 100% Free & Easy'
- type: status
status:
- 200
- type: dsl
dsl:
- '!contains(host,"avast.com")'
# digest: 4a0a0047304502203dff32265eb811a840fa886909ab0e646aa36d13d1696ee82e60353645e8aa9f0221009caf267b3a40d73bb79f5adc431bb914721db1422160711d4cb71eaecc76b46c:922c64590222798bb761d5b6d8e72950